Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
File: 90REoIZ_zKmjVpwf0JITNUajf0s.mft (raw, json)
Hash identifier: mHNe37u53BMBqTurGS3BuchdqAbszX7qIwnGXugH17s=
Subject key identifier: CF:9A:60:63:5C:47:C7:CC:5E:12:2B:72:6E:70:8A:3B:49:39:58:5A
Authority key identifier: F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B
Certificate issuer: /CN=f74444a0867fcca9a3569c1fd092133546a37f4b
Certificate serial: 019D382EAAC713A7286FFCE1EC9625F28E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
Manifest number: 181F
Signing time: Sun 29 Mar 2026 06:01:15 +0000
Manifest this update: Sun 29 Mar 2026 06:01:15 +0000
Manifest next update: Mon 30 Mar 2026 06:01:15 +0000
Files and hashes: 1: 90REoIZ_zKmjVpwf0JITNUajf0s.crl (hash: ILMVRUFMahNKDgM58rBmQXO9yPkPqQbQnDuG3+IFi6k=)
2: n2KWOfawjYsdrcU5kcTAVZoJ1KA.roa (hash: xCEQfYPaY0aViHtL0tmC47O4thf/Lzk7C/w84Q6tZQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:aa:c7:13:a7:28:6f:fc:e1:ec:96:25:f2:8e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f74444a0867fcca9a3569c1fd092133546a37f4b
Validity
Not Before: Mar 29 06:01:15 2026 GMT
Not After : Mar 30 06:01:15 2026 GMT
Subject: CN=cf9a60635c47c7cc5e122b726e708a3b4939585a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:55:bc:a8:9f:98:28:4a:b0:9c:b2:ec:21:11:
32:a0:a0:93:e5:67:27:64:f0:b8:a9:25:69:09:5c:
6c:25:5b:b7:62:1b:31:57:3c:b8:db:20:12:58:fa:
04:9d:80:7b:b5:b1:8c:46:33:b8:06:03:d9:f5:9b:
9e:96:68:83:8e:4c:ba:e5:d1:ba:0c:92:02:5b:67:
45:b5:4a:3b:64:56:ec:60:7e:a4:b8:1f:b5:0f:c2:
83:51:e5:2e:e1:91:ce:40:c1:7a:19:6c:9e:2d:ff:
90:be:a3:df:cc:11:f8:89:55:37:7b:2c:b5:a9:7d:
f5:9c:17:ff:19:64:e1:d2:93:8c:f1:73:31:2d:44:
c8:7c:d2:65:fa:cc:b0:6b:ed:7c:dd:88:15:2c:40:
be:34:47:ba:4b:77:59:a8:50:08:42:79:26:fa:ae:
15:e2:09:f0:53:36:73:5a:34:66:da:83:65:43:fa:
b0:18:0a:68:26:79:e5:d8:5f:cc:50:63:d7:4f:12:
8b:20:c3:5f:d6:a1:46:68:05:ef:f0:1f:be:a4:0f:
78:3a:ed:11:d3:35:dd:46:31:55:ce:71:e0:19:60:
2e:5d:ce:d8:42:79:d0:06:ad:84:ed:fb:95:48:07:
f0:12:3c:7d:a5:b5:ac:38:e8:a7:0f:dd:dc:80:29:
bd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9A:60:63:5C:47:C7:CC:5E:12:2B:72:6E:70:8A:3B:49:39:58:5A
X509v3 Authority Key Identifier:
keyid:F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f6:66:b7:11:bc:93:79:03:5c:97:06:c1:cc:c8:f8:a1:06:
31:0f:c9:cf:e7:52:4e:6f:fe:ec:de:89:98:76:c5:9a:c5:71:
86:94:ea:f1:d7:0e:42:b2:e3:26:a8:5b:63:1c:c7:75:3a:1e:
8c:5f:ac:84:b1:9b:8e:15:fa:1f:72:26:75:b3:fc:d1:33:8d:
2b:b7:7e:cc:35:33:62:82:3f:f8:bd:d4:6b:87:ff:a0:cf:01:
ef:1c:6a:e1:f5:57:13:0a:8c:d4:c2:da:e7:a5:1f:cb:4b:b2:
fe:d1:27:5b:94:50:1d:6b:b5:26:64:fc:6d:5c:67:78:79:42:
04:88:45:0c:19:9e:6d:6e:19:b1:78:13:a8:41:43:63:ad:be:
ae:c9:04:b4:24:11:82:73:c1:59:2d:97:b2:f5:c6:cf:ac:1f:
d4:7a:d0:35:b3:47:58:d8:03:21:6b:4e:38:31:d8:4f:ae:a8:
84:ca:6c:53:45:82:74:cd:3b:c4:42:b4:83:96:36:9a:cf:57:
2f:05:d8:98:02:29:7e:88:d5:53:49:8e:eb:d5:eb:51:30:4e:
bb:50:3f:0f:63:6d:7d:4c:ba:90:3e:a4:e5:14:ce:5e:89:d6:
a9:0f:38:7a:71:63:6f:25:d1:c7:68:c0:a6:29:61:3e:ba:c7:
57:bb:90:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:20 2026 by rpki-client